Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
File:                     dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft (raw, json)
Hash identifier:          HpUUUrLR+Va6Sivg+nuyntdhSJKa/+KqoVidCpJzoN0=
Subject key identifier:   01:AE:4E:06:A1:1C:D0:6D:0C:A5:17:2E:B6:A5:53:87:7D:BB:45:BD
Authority key identifier: 75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03
Certificate issuer:       /CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103
Certificate serial:       019D99D0E7F942E30CCC77D0027BF24404C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 05:01:38 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:38 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:38 +0000
Files and hashes:         1: dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl (hash: wm1h9/uUQKgltr93M/3pp2YG0E+rxshPFDiBvZYUQfE=)
                          2: hPEOUrTaqxkP0HraBv5tFWum52o.roa (hash: a68ZRNdry4Fa8CMUTj7dyBiReCufFH2K20dWi6+LdmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:e7:f9:42:e3:0c:cc:77:d0:02:7b:f2:44:04:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103
        Validity
            Not Before: Apr 17 05:01:38 2026 GMT
            Not After : Apr 18 05:01:38 2026 GMT
        Subject: CN=01ae4e06a11cd06d0ca5172eb6a553877dbb45bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6b:01:e7:b2:23:f6:b2:8c:a1:16:02:2a:37:
                    99:19:79:e3:a6:74:51:a0:b7:62:ef:ed:89:16:36:
                    e2:c9:34:d6:99:f1:34:8e:f8:f1:69:39:53:1c:2b:
                    9e:b3:db:b3:c1:f7:7c:90:fd:76:d8:89:c2:2f:52:
                    fa:db:7e:a4:2c:e1:3a:f2:e1:3b:48:98:d4:bb:bb:
                    78:c3:f1:b2:e8:4a:51:00:43:8d:fb:b1:c2:bd:43:
                    a0:4a:de:8a:b0:bd:df:5a:d2:80:0a:a0:6d:bf:4e:
                    3a:e5:72:b5:45:a1:3a:e4:37:32:c9:dd:2b:af:32:
                    fc:d8:72:83:6d:8b:7f:d9:98:3f:ed:98:32:3f:c0:
                    37:b7:0b:66:ac:a0:25:e5:00:b9:61:0b:e9:70:9a:
                    d7:26:fb:ac:fc:e6:ef:fa:35:da:31:62:bb:cf:af:
                    96:e1:e3:ca:e7:b7:c0:af:b4:c7:55:3f:41:0b:7d:
                    30:0c:09:66:57:1f:d9:1c:1d:d8:e6:23:f5:2f:1f:
                    81:45:8e:20:fc:1b:9d:2f:ae:7d:1a:eb:05:08:d9:
                    28:6b:5e:fc:06:59:0b:c2:ae:f9:cc:df:47:12:ec:
                    33:6d:0d:d6:bb:ec:00:90:42:4e:51:5e:d5:6e:f0:
                    c5:b3:19:e5:a1:40:94:b6:86:a9:89:ee:48:5d:ed:
                    7a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AE:4E:06:A1:1C:D0:6D:0C:A5:17:2E:B6:A5:53:87:7D:BB:45:BD
            X509v3 Authority Key Identifier:
                keyid:75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:39:c4:e0:12:a3:ca:ee:86:b8:bf:6e:ee:20:b5:16:32:9b:
         61:8b:35:a3:01:d6:1b:f0:e3:d0:5b:27:4c:6c:e3:52:73:78:
         9d:27:dd:47:7b:89:a5:58:91:2d:29:3b:b1:4f:80:f9:6f:c3:
         d6:8e:1e:f0:28:6d:9b:0c:3c:d4:21:14:32:c1:03:7c:3e:f2:
         fe:58:79:fa:76:5f:4c:14:a8:ce:8c:ab:41:ae:a9:6a:b6:9f:
         88:fe:50:f2:b9:e1:4f:ca:21:65:56:bb:6d:ce:39:35:a0:14:
         3b:9d:68:20:ff:23:90:15:f8:10:ac:dc:99:2b:44:07:dc:6c:
         44:94:70:5b:79:bb:c3:53:e7:d2:08:3d:d1:f4:fa:c0:15:39:
         5b:2f:2f:cd:dc:83:31:0f:0f:03:4e:ff:c5:0b:90:7a:c1:49:
         f0:4c:6e:e7:e9:48:8e:2d:86:0d:58:7e:e6:82:56:e6:20:88:
         1d:a0:c5:88:63:bb:77:c8:70:47:15:05:1b:76:f2:49:56:1f:
         93:d8:08:93:15:f9:bc:2f:dd:d7:6f:f2:be:9f:5b:10:31:53:
         65:d9:51:75:8d:f5:9f:69:8d:28:28:95:1a:11:fb:23:4c:c7:
         ee:c7:91:69:ce:cd:bd:0c:59:8d:2c:81:37:82:1f:e2:01:e1:
         6f:1b:e9:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0Of5QuMMzHfQAnvyRATBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NTFiMDJkNTVkMzUwNWZiOWY5NzE5ZmJkMGI1MjMxNmZm
NmMxMDMwHhcNMjYwNDE3MDUwMTM4WhcNMjYwNDE4MDUwMTM4WjAzMTEwLwYDVQQD
EygwMWFlNGUwNmExMWNkMDZkMGNhNTE3MmViNmE1NTM4NzdkYmI0NWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGsB57Ij9rKMoRYCKjeZGXnjpnRR
oLdi7+2JFjbiyTTWmfE0jvjxaTlTHCues9uzwfd8kP122InCL1L6236kLOE68uE7
SJjUu7t4w/Gy6EpRAEON+7HCvUOgSt6KsL3fWtKACqBtv0465XK1RaE65Dcyyd0r
rzL82HKDbYt/2Zg/7ZgyP8A3twtmrKAl5QC5YQvpcJrXJvus/Obv+jXaMWK7z6+W
4ePK57fAr7THVT9BC30wDAlmVx/ZHB3Y5iP1Lx+BRY4g/BudL659GusFCNkoa178
BlkLwq75zN9HEuwzbQ3Wu+wAkEJOUV7VbvDFsxnloUCUtoapie5IXe16yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGuTgahHNBtDKUXLralU4d9u0W9MB8GA1UdIwQY
MBaAFHVRsC1V01Bfuflxn70LUjFv9sEDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFZHd0xWWFRVRi01LVhHZnZRdFNNV18yd1FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xMzZiNDMtM2I3Ni00YjE3LWEzNjYt
ODRiN2Y2ODhiYTMwLzEvZFZHd0xWWFRVRi01LVhHZnZRdFNNV18yd1FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8xMzZiNDMtM2I3Ni00YjE3LWEzNjYtODRiN2Y2ODhiYTMw
LzEvZFZHd0xWWFRVRi01LVhHZnZRdFNNV18yd1FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDnE4BKj
yu6GuL9u7iC1FjKbYYs1owHWG/Dj0FsnTGzjUnN4nSfdR3uJpViRLSk7sU+A+W/D
1o4e8Chtmww81CEUMsEDfD7y/lh5+nZfTBSozoyrQa6parafiP5Q8rnhT8ohZVa7
bc45NaAUO51oIP8jkBX4EKzcmStEB9xsRJRwW3m7w1Pn0gg90fT6wBU5Wy8vzdyD
MQ8PA07/xQuQesFJ8Exu5+lIji2GDVh+5oJW5iCIHaDFiGO7d8hwRxUFG3bySVYf
k9gIkxX5vC/d12/yvp9bEDFTZdlRdY31n2mNKCiVGhH7I0zH7seRac7NvQxZjSyB
N4If4gHhbxvppg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:20:50 2026 by rpki-client